Composable primitives for dead code elimination in Babel
78%
Total Score
75
100
94
67
100
All 7 recent commits came from one contributor, giving the project a narrow maintenance base. The active recent work is reassuring, but loss of that contributor would materially increase continuity risk.
The repository uses TypeScript, npm scripts, and Babel for its build, but reports no security scanning tools. The missing scanning is a modest transparency and hygiene gap.
No repository security policy is present. For a library with a recent release and active maintenance this is a hygiene gap, but it does not by itself indicate abandonment.
The one workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, and it scopes permissions at job level. However, all 13 action references are unpinned, leaving a meaningful reproducibility and action-integrity gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@babel/core Version ^7.23.7 | — | — |
@babel/types Version ^7.23.6 | — | — |
@babel/parser Version ^7.23.6 | — | — |
@babel/traverse Version ^7.23.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.